CA certs not available after changing domain administrator password

[cwhitmore (Carlton3412)]

Not sure why, but after changing the domain administrator password I’m not able to request a certificate from the certificate authority for most certs. After the password change I only see “Computer”, “Web Server” and “Workstation Authentication” from a domain joined Windows server. If I check “Show all templates” I do see the rest of the certs, but all show “permissions on the certificate template do not allow the current user to enroll…”.

If I log into a domain controller I’m able to see all of the certs and enroll them.

[stefan-pulseway]

This sounds like it could be a permissions issue, when you changed the domain admin password it might have altered some permissions so be sure double check the permissions on the certificate templates MMC. Also try run the certificate manager as an admin to try and figure out if its a user account control issue.

[cwhitmore (Carlton3412)]

Thanks Stefan. That’s what it was. I had to give the computers read/enroll permissions.